CVE-2018-11198: Acquia Mautic

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json.

Affected products

• Acquia Mautic: version 2.13.1 only

Published 2019-09-06. Last modified 2026-06-17.